[ic] Always use generic ICs for growing element stores on arguments

[ic] Always use generic ICs for growing element stores on arguments

In certain corner-cases we would grow a FAST_ELEMENTS packed backing store of a
JS_ARGUMENTS_TYPE object without converting to holey elements kinds. As a side
effect you could then read out the_hole.

BUG=v8:5772
Review-Url: https://codereview.chromium.org/2597013004
Cr-Commit-Position: refs/heads/master@{#41921}
Committed: https://chromium.googlesource.com/v8/v8/+/f73973092c780ba6c2c6988fce777472eb95a58f

[Camillo Bruni, 2016-12-22 13:28:54]

The CQ bit was checked by cbruni@chromium.org to run a CQ dry run

[commit-bot: I haz the power, 2016-12-22 13:29:03]

Dry run: CQ is trying da patch. Follow status at
 
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[commit-bot: I haz the power, 2016-12-22 13:58:23]

The CQ bit was unchecked by commit-bot@chromium.org

[commit-bot: I haz the power, 2016-12-22 13:58:24]

Dry run: This issue passed the CQ dry run.

[Camillo Bruni, 2016-12-22 14:06:36]

cbruni@chromium.org changed reviewers:
+ ishell@chromium.org

[Camillo Bruni, 2016-12-22 14:06:37]

PTAL

[Igor Sheludko, 2016-12-22 14:08:40]

lgtm

[Camillo Bruni, 2016-12-22 14:09:10]

The CQ bit was checked by cbruni@chromium.org

[commit-bot: I haz the power, 2016-12-22 14:09:18]

CQ is trying da patch. Follow status at
 
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[commit-bot: I haz the power, 2016-12-22 14:10:51]

CQ is committing da patch.

Bot data: {"patchset_id": 1, "attempt_start_ts": 1482415750388640, "parent_rev":
"b9b6e0b06d8ccd6759b32dadad8ed4bda1258aec", "commit_rev":
"f73973092c780ba6c2c6988fce777472eb95a58f"}

[commit-bot: I haz the power, 2016-12-22 14:11:00]

Description was changed from

==========
[ic] Always use generic ICs for growing element stores on arguments

In certain corner-cases we would grow a FAST_ELEMENTS packed backing store of a
JS_ARGUMENTS_TYPE object without converting to holey elements kinds. As a side
effect you could then read out the_hole.

BUG=v8:5772
==========

to

==========
[ic] Always use generic ICs for growing element stores on arguments

In certain corner-cases we would grow a FAST_ELEMENTS packed backing store of a
JS_ARGUMENTS_TYPE object without converting to holey elements kinds. As a side
effect you could then read out the_hole.

BUG=v8:5772

Review-Url: https://codereview.chromium.org/2597013004
Cr-Commit-Position: refs/heads/master@{#41921}
Committed:
https://chromium.googlesource.com/v8/v8/+/f73973092c780ba6c2c6988fce777472eb9...
==========

[commit-bot: I haz the power, 2016-12-22 14:11:01]

Committed patchset #1 (id:1) as
https://chromium.googlesource.com/v8/v8/+/f73973092c780ba6c2c6988fce777472eb9...